Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qrfp-c3c5-pw2c

Опубликовано: 07 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks

EPSS

Процентиль: 29%
0.00103
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks

EPSS

Процентиль: 29%
0.00103
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89